modules/admin-full: add macfilter options to mac80211 wifi config
[project/luci.git] / modules / admin-full / luasrc / model / cbi / admin_network / wifi.lua
1 --[[
2 LuCI - Lua Configuration Interface
3
4 Copyright 2008 Steven Barth <steven@midlink.org>
5
6 Licensed under the Apache License, Version 2.0 (the "License");
7 you may not use this file except in compliance with the License.
8 You may obtain a copy of the License at
9
10         http://www.apache.org/licenses/LICENSE-2.0
11
12 $Id$
13 ]]--
14
15 local wa = require "luci.tools.webadmin"
16 local nw = require "luci.model.network"
17 local fs = require "nixio.fs"
18
19 arg[1] = arg[1] or ""
20
21 m = Map("wireless", "",
22         translate("The <em>Device Configuration</em> section covers physical settings of the radio " ..
23                 "hardware such as channel, transmit power or antenna selection which is shared among all " ..
24                 "defined wireless networks (if the radio hardware is multi-SSID capable). Per network settings " ..
25                 "like encryption or operation mode are grouped in the <em>Interface Configuration</em>."))
26
27 m:chain("network")
28
29 local ifsection
30
31 function m.on_commit(map)
32         local wnet = nw:get_wifinet(arg[1])
33         if ifsection and wnet then
34                 ifsection.section = wnet.sid
35                 m.title = luci.util.pcdata(wnet:get_i18n())
36         end
37 end
38
39 nw.init(m.uci)
40
41 local wnet = nw:get_wifinet(arg[1])
42 local wdev = wnet and wnet:get_device()
43
44 -- redirect to overview page if network does not exist anymore (e.g. after a revert)
45 if not wnet or not wdev then
46         luci.http.redirect(luci.dispatcher.build_url("admin/network/wireless"))
47         return
48 end
49
50 m.title = luci.util.pcdata(wnet:get_i18n())
51
52
53 local iw = luci.sys.wifi.getiwinfo(arg[1])
54 local hw_modes  = iw.hwmodelist or { }
55 local tx_powers = iw.txpwrlist  or { }
56 local tx_power  = tostring(
57         (iw.txpower and iw.txpower > 0 and iw.txpower) or
58         (#tx_powers > 0 and tx_powers[#tx_powers].dbm)
59 )
60
61 s = m:section(NamedSection, wdev:name(), "wifi-device", translate("Device Configuration"))
62 s.addremove = false
63
64 s:tab("general", translate("General Setup"))
65 s:tab("macfilter", translate("MAC-Filter"))
66 s:tab("advanced", translate("Advanced Settings"))
67
68 --[[
69 back = s:option(DummyValue, "_overview", translate("Overview"))
70 back.value = ""
71 back.titleref = luci.dispatcher.build_url("admin", "network", "wireless")
72 ]]
73
74 st = s:taboption("general", DummyValue, "__status", translate("Status"))
75 st.template = "admin_network/wifi_status"
76 st.ifname   = arg[1]
77
78 en = s:taboption("general", Flag, "disabled", translate("Enable device"))
79 en.enabled = "0"
80 en.disabled = "1"
81 en.rmempty = false
82
83 function en.cfgvalue(self, section)
84         return Flag.cfgvalue(self, section) or "0"
85 end
86
87
88 local hwtype = wdev:get("type")
89 local htcaps = wdev:get("ht_capab") and true or false
90
91 -- NanoFoo
92 local nsantenna = wdev:get("antenna")
93
94 ch = s:taboption("general", Value, "channel", translate("Channel"))
95 ch:value("auto", translate("auto"))
96 for _, f in ipairs(iw and iw.freqlist or luci.sys.wifi.channels()) do
97         if not f.restricted then
98                 ch:value(f.channel, "%i (%.3f GHz)" %{ f.channel, f.mhz / 1000 })
99         end
100 end
101
102
103 ------------------- MAC80211 Device ------------------
104
105 if hwtype == "mac80211" then
106         tp = s:taboption("general",
107                 (tx_powers and #tx_powers > 0) and ListValue or Value,
108                 "txpower", translate("Transmit Power"), "dBm")
109
110         tp.rmempty = true
111         tp.default = tx_power
112         for _, p in ipairs(tx_powers or {}) do
113                 tp:value(p.dbm, "%i dBm (%i mW)" %{ p.dbm, p.mw })
114         end
115
116         mode = s:taboption("advanced", ListValue, "hwmode", translate("Mode"))
117         mode:value("", translate("auto"))
118         if hw_modes.b then mode:value("11b", "802.11b") end
119         if hw_modes.g then mode:value("11g", "802.11g") end
120         if hw_modes.a then mode:value("11a", "802.11a") end
121
122         if htcaps then
123                 if hw_modes.g and hw_modes.n then mode:value("11ng", "802.11g+n") end
124                 if hw_modes.a and hw_modes.n then mode:value("11na", "802.11a+n") end
125
126                 htmode = s:taboption("advanced", ListValue, "htmode", translate("HT mode"))
127                 htmode:depends("hwmode", "11na")
128                 htmode:depends("hwmode", "11ng")
129                 htmode:value("HT20", "20MHz")
130                 htmode:value("HT40-", translate("40MHz 2nd channel below"))
131                 htmode:value("HT40+", translate("40MHz 2nd channel above"))
132
133                 --htcapab = s:taboption("advanced", DynamicList, "ht_capab", translate("HT capabilities"))
134                 --htcapab:depends("hwmode", "11na")
135                 --htcapab:depends("hwmode", "11ng")
136         end
137
138         mp = s:taboption("macfilter", ListValue, "macfilter", translate("MAC-Address Filter"))
139         mp:value("", translate("disable"))
140         mp:value("allow", translate("Allow listed only"))
141         mp:value("deny", translate("Allow all except listed"))
142
143         ml = s:taboption("macfilter", DynamicList, "maclist", translate("MAC-List"))
144         ml.datatype = "macaddr"
145         ml:depends({macfilter="allow"})
146         ml:depends({macfilter="deny"})
147
148         local cl = iw and iw.countrylist
149         if cl and #cl > 0 then
150                 cc = s:taboption("advanced", ListValue, "country", translate("Country Code"), translate("Use ISO/IEC 3166 alpha2 country codes."))
151                 cc.default = tostring(iw and iw.country or "00")
152                 for _, c in ipairs(cl) do
153                         cc:value(c.alpha2, "%s - %s" %{ c.alpha2, c.name })
154                 end
155         else
156                 s:taboption("advanced", Value, "country", translate("Country Code"), translate("Use ISO/IEC 3166 alpha2 country codes."))
157         end
158
159         s:taboption("advanced", Value, "distance", translate("Distance Optimization"),
160                 translate("Distance to farthest network member in meters."))
161 end
162
163
164 ------------------- Madwifi Device ------------------
165
166 if hwtype == "atheros" then
167         tp = s:taboption("general",
168                 (#tx_powers > 0) and ListValue or Value,
169                 "txpower", translate("Transmit Power"), "dBm")
170
171         tp.rmempty = true
172         tp.default = tx_power
173         for _, p in ipairs(tx_powers or {}) do
174                 tp:value(p.dbm, "%i dBm (%i mW)" %{ p.dbm, p.mw })
175         end
176
177         mode = s:taboption("advanced", ListValue, "hwmode", translate("Mode"))
178         mode:value("", translate("auto"))
179         if hw_modes.b then mode:value("11b", "802.11b") end
180         if hw_modes.g then mode:value("11g", "802.11g") end
181         if hw_modes.a then mode:value("11a", "802.11a") end
182         if hw_modes.g then mode:value("11bg", "802.11b+g") end
183         if hw_modes.g then mode:value("11gst", "802.11g + Turbo") end
184         if hw_modes.a then mode:value("11ast", "802.11a + Turbo") end
185         mode:value("fh", translate("Frequency Hopping"))
186
187         s:taboption("advanced", Flag, "diversity", translate("Diversity")).rmempty = false
188
189         if not nsantenna then
190                 ant1 = s:taboption("advanced", ListValue, "txantenna", translate("Transmitter Antenna"))
191                 ant1.widget = "radio"
192                 ant1.orientation = "horizontal"
193                 ant1:depends("diversity", "")
194                 ant1:value("0", translate("auto"))
195                 ant1:value("1", translate("Antenna 1"))
196                 ant1:value("2", translate("Antenna 2"))
197
198                 ant2 = s:taboption("advanced", ListValue, "rxantenna", translate("Receiver Antenna"))
199                 ant2.widget = "radio"
200                 ant2.orientation = "horizontal"
201                 ant2:depends("diversity", "")
202                 ant2:value("0", translate("auto"))
203                 ant2:value("1", translate("Antenna 1"))
204                 ant2:value("2", translate("Antenna 2"))
205
206         else -- NanoFoo
207                 local ant = s:taboption("advanced", ListValue, "antenna", translate("Transmitter Antenna"))
208                 ant:value("auto")
209                 ant:value("vertical")
210                 ant:value("horizontal")
211                 ant:value("external")
212         end
213
214         s:taboption("advanced", Value, "distance", translate("Distance Optimization"),
215                 translate("Distance to farthest network member in meters."))
216         s:taboption("advanced", Value, "regdomain", translate("Regulatory Domain"))
217         s:taboption("advanced", Value, "country", translate("Country Code"))
218         s:taboption("advanced", Flag, "outdoor", translate("Outdoor Channels"))
219
220         --s:option(Flag, "nosbeacon", translate("Disable HW-Beacon timer"))
221 end
222
223
224
225 ------------------- Broadcom Device ------------------
226
227 if hwtype == "broadcom" then
228         tp = s:taboption("general",
229                 (#tx_powers > 0) and ListValue or Value,
230                 "txpower", translate("Transmit Power"), "dBm")
231
232         tp.rmempty = true
233         tp.default = tx_power
234         for _, p in ipairs(tx_powers or {}) do
235                 tp:value(p.dbm, "%i dBm (%i mW)" %{ p.dbm, p.mw })
236         end
237
238         mode = s:taboption("advanced", ListValue, "hwmode", translate("Mode"))
239         mode:value("11bg", "802.11b+g")
240         mode:value("11b", "802.11b")
241         mode:value("11g", "802.11g")
242         mode:value("11gst", "802.11g + Turbo")
243
244         mp = s:taboption("macfilter", ListValue, "macfilter", translate("MAC-Address Filter"))
245         mp:value("", translate("disable"))
246         mp:value("allow", translate("Allow listed only"))
247         mp:value("deny", translate("Allow all except listed"))
248
249         ml = s:taboption("macfilter", DynamicList, "maclist", translate("MAC-List"))
250         ml.datatype = "macaddr"
251         ml:depends({macfilter="allow"})
252         ml:depends({macfilter="deny"})
253
254         ant1 = s:taboption("advanced", ListValue, "txantenna", translate("Transmitter Antenna"))
255         ant1.widget = "radio"
256         ant1:depends("diversity", "")
257         ant1:value("3", translate("auto"))
258         ant1:value("0", translate("Antenna 1"))
259         ant1:value("1", translate("Antenna 2"))
260
261         ant2 = s:taboption("advanced", ListValue, "rxantenna", translate("Receiver Antenna"))
262         ant2.widget = "radio"
263         ant2:depends("diversity", "")
264         ant2:value("3", translate("auto"))
265         ant2:value("0", translate("Antenna 1"))
266         ant2:value("1", translate("Antenna 2"))
267
268         s:taboption("advanced", Flag, "frameburst", translate("Frame Bursting"))
269
270         s:taboption("advanced", Value, "distance", translate("Distance Optimization"))
271         --s:option(Value, "slottime", translate("Slot time"))
272
273         s:taboption("advanced", Value, "country", translate("Country Code"))
274         s:taboption("advanced", Value, "maxassoc", translate("Connection Limit"))
275 end
276
277
278 --------------------- HostAP Device ---------------------
279
280 if hwtype == "prism2" then
281         s:taboption("advanced", Value, "txpower", translate("Transmit Power"), "att units").rmempty = true
282
283         s:taboption("advanced", Flag, "diversity", translate("Diversity")).rmempty = false
284
285         s:taboption("advanced", Value, "txantenna", translate("Transmitter Antenna"))
286         s:taboption("advanced", Value, "rxantenna", translate("Receiver Antenna"))
287 end
288
289
290 ----------------------- Interface -----------------------
291
292 s = m:section(NamedSection, wnet.sid, "wifi-iface", translate("Interface Configuration"))
293 ifsection = s
294 s.addremove = false
295 s.anonymous = true
296 s.defaults.device = wdev:name()
297
298 s:tab("general", translate("General Setup"))
299 s:tab("encryption", translate("Wireless Security"))
300 s:tab("macfilter", translate("MAC-Filter"))
301 s:tab("advanced", translate("Advanced Settings"))
302
303 s:taboption("general", Value, "ssid", translate("<abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
304
305 mode = s:taboption("general", ListValue, "mode", translate("Mode"))
306 mode.override_values = true
307 mode:value("ap", translate("Access Point"))
308 mode:value("sta", translate("Client"))
309 mode:value("adhoc", translate("Ad-Hoc"))
310
311 bssid = s:taboption("general", Value, "bssid", translate("<abbr title=\"Basic Service Set Identifier\">BSSID</abbr>"))
312
313 network = s:taboption("general", Value, "network", translate("Network"),
314         translate("Choose the network you want to attach to this wireless interface. " ..
315                 "Select <em>unspecified</em> to not attach any network or fill out the " ..
316                 "<em>create</em> field to define a new network."))
317
318 network.rmempty = true
319 network.template = "cbi/network_netlist"
320 network.widget = "radio"
321
322 function network.write(self, section, value)
323         local i = nw:get_interface(section)
324         if i then
325                 if value == '-' then
326                         value = m:formvalue(self:cbid(section) .. ".newnet")
327                         if value and #value > 0 then
328                                 local n = nw:add_network(value, {proto="none"})
329                                 if n then n:add_interface(i) end
330                         else
331                                 local n = i:get_network()
332                                 if n then n:del_interface(i) end
333                         end
334                 else
335                         local n = nw:get_network(value)
336                         if n then
337                                 n:set("type", "bridge")
338                                 n:add_interface(i)
339                         end
340                 end
341         end
342 end
343
344 -------------------- MAC80211 Interface ----------------------
345
346 if hwtype == "mac80211" then
347         if fs.access("/usr/sbin/iw") then
348                 mode:value("mesh", "802.11s")
349         end
350
351         mode:value("ahdemo", translate("Pseudo Ad-Hoc (ahdemo)"))
352         mode:value("monitor", translate("Monitor"))
353         bssid:depends({mode="adhoc"})
354
355         s:taboption("advanced", Value, "frag", translate("Fragmentation Threshold"))
356         s:taboption("advanced", Value, "rts", translate("RTS/CTS Threshold"))
357
358         mode:value("ap-wds", "%s (%s)" % {translate("Access Point"), translate("WDS")})
359         mode:value("sta-wds", "%s (%s)" % {translate("Client"), translate("WDS")})
360
361         function mode.write(self, section, value)
362                 if value == "ap-wds" then
363                         ListValue.write(self, section, "ap")
364                         m.uci:set("wireless", section, "wds", 1)
365                 elseif value == "sta-wds" then
366                         ListValue.write(self, section, "sta")
367                         m.uci:set("wireless", section, "wds", 1)
368                 else
369                         ListValue.write(self, section, value)
370                         m.uci:delete("wireless", section, "wds")
371                 end
372         end
373
374         function mode.cfgvalue(self, section)
375                 local mode = ListValue.cfgvalue(self, section)
376                 local wds  = m.uci:get("wireless", section, "wds") == "1"
377
378                 if mode == "ap" and wds then
379                         return "ap-wds"
380                 elseif mode == "sta" and wds then
381                         return "sta-wds"
382                 else
383                         return mode
384                 end
385         end
386
387         hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
388         hidden:depends({mode="ap"})
389         hidden:depends({mode="ap-wds"})
390 end
391
392
393
394 -------------------- Madwifi Interface ----------------------
395
396 if hwtype == "atheros" then
397         mode:value("ahdemo", translate("Pseudo Ad-Hoc (ahdemo)"))
398         mode:value("monitor", translate("Monitor"))
399         mode:value("ap-wds", "%s (%s)" % {translate("Access Point"), translate("WDS")})
400         mode:value("sta-wds", "%s (%s)" % {translate("Client"), translate("WDS")})
401         mode:value("wds", translate("Static WDS"))
402
403         function mode.write(self, section, value)
404                 if value == "ap-wds" then
405                         ListValue.write(self, section, "ap")
406                         m.uci:set("wireless", section, "wds", 1)
407                 elseif value == "sta-wds" then
408                         ListValue.write(self, section, "sta")
409                         m.uci:set("wireless", section, "wds", 1)
410                 else
411                         ListValue.write(self, section, value)
412                         m.uci:delete("wireless", section, "wds")
413                 end
414         end
415
416         function mode.cfgvalue(self, section)
417                 local mode = ListValue.cfgvalue(self, section)
418                 local wds  = m.uci:get("wireless", section, "wds") == "1"
419
420                 if mode == "ap" and wds then
421                         return "ap-wds"
422                 elseif mode == "sta" and wds then
423                         return "sta-wds"
424                 else
425                         return mode
426                 end
427         end
428
429         bssid:depends({mode="adhoc"})
430         bssid:depends({mode="ahdemo"})
431         bssid:depends({mode="wds"})
432
433         wdssep = s:taboption("advanced", Flag, "wdssep", translate("Separate WDS"))
434         wdssep:depends({mode="ap-wds"})
435
436         s:taboption("advanced", Flag, "doth", "802.11h")
437         hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
438         hidden:depends({mode="ap"})
439         hidden:depends({mode="adhoc"})
440         hidden:depends({mode="ap-wds"})
441         hidden:depends({mode="sta-wds"})
442         isolate = s:taboption("advanced", Flag, "isolate", translate("Separate Clients"),
443          translate("Prevents client-to-client communication"))
444         isolate:depends({mode="ap"})
445         s:taboption("advanced", Flag, "bgscan", translate("Background Scan"))
446
447         mp = s:taboption("macfilter", ListValue, "macpolicy", translate("MAC-Address Filter"))
448         mp:value("", translate("disable"))
449         mp:value("deny", translate("Allow listed only"))
450         mp:value("allow", translate("Allow all except listed"))
451
452         ml = s:taboption("macfilter", DynamicList, "maclist", translate("MAC-List"))
453         ml.datatype = "macaddr"
454         ml:depends({macpolicy="allow"})
455         ml:depends({macpolicy="deny"})
456
457         s:taboption("advanced", Value, "rate", translate("Transmission Rate"))
458         s:taboption("advanced", Value, "mcast_rate", translate("Multicast Rate"))
459         s:taboption("advanced", Value, "frag", translate("Fragmentation Threshold"))
460         s:taboption("advanced", Value, "rts", translate("RTS/CTS Threshold"))
461         s:taboption("advanced", Value, "minrate", translate("Minimum Rate"))
462         s:taboption("advanced", Value, "maxrate", translate("Maximum Rate"))
463         s:taboption("advanced", Flag, "compression", translate("Compression"))
464
465         s:taboption("advanced", Flag, "bursting", translate("Frame Bursting"))
466         s:taboption("advanced", Flag, "turbo", translate("Turbo Mode"))
467         s:taboption("advanced", Flag, "ff", translate("Fast Frames"))
468
469         s:taboption("advanced", Flag, "wmm", translate("WMM Mode"))
470         s:taboption("advanced", Flag, "xr", translate("XR Support"))
471         s:taboption("advanced", Flag, "ar", translate("AR Support"))
472
473         local swm = s:taboption("advanced", Flag, "sw_merge", translate("Disable HW-Beacon timer"))
474         swm:depends({mode="adhoc"})
475
476         local nos = s:taboption("advanced", Flag, "nosbeacon", translate("Disable HW-Beacon timer"))
477         nos:depends({mode="sta"})
478         nos:depends({mode="sta-wds"})
479
480         local probereq = s:taboption("advanced", Flag, "probereq", translate("Do not send probe responses"))
481         probereq.enabled  = "0"
482         probereq.disabled = "1"
483 end
484
485
486 -------------------- Broadcom Interface ----------------------
487
488 if hwtype == "broadcom" then
489         mode:value("wds", translate("WDS"))
490         mode:value("monitor", translate("Monitor"))
491
492         hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
493         hidden:depends({mode="ap"})
494         hidden:depends({mode="adhoc"})
495         hidden:depends({mode="wds"})
496
497         isolate = s:taboption("advanced", Flag, "isolate", translate("Separate Clients"),
498          translate("Prevents client-to-client communication"))
499         isolate:depends({mode="ap"})
500
501         s:taboption("advanced", Flag, "doth", "802.11h")
502         s:taboption("advanced", Flag, "wmm", translate("WMM Mode"))
503
504         bssid:depends({mode="wds"})
505         bssid:depends({mode="adhoc"})
506 end
507
508
509 ----------------------- HostAP Interface ---------------------
510
511 if hwtype == "prism2" then
512         mode:value("wds", translate("WDS"))
513         mode:value("monitor", translate("Monitor"))
514
515         hidden = s:taboption("general", Flag, "hidden", translate("Hide <abbr title=\"Extended Service Set Identifier\">ESSID</abbr>"))
516         hidden:depends({mode="ap"})
517         hidden:depends({mode="adhoc"})
518         hidden:depends({mode="wds"})
519
520         bssid:depends({mode="sta"})
521
522         mp = s:taboption("macfilter", ListValue, "macpolicy", translate("MAC-Address Filter"))
523         mp:value("", translate("disable"))
524         mp:value("deny", translate("Allow listed only"))
525         mp:value("allow", translate("Allow all except listed"))
526         ml = s:taboption("macfilter", DynamicList, "maclist", translate("MAC-List"))
527         ml:depends({macpolicy="allow"})
528         ml:depends({macpolicy="deny"})
529
530         s:taboption("advanced", Value, "rate", translate("Transmission Rate"))
531         s:taboption("advanced", Value, "frag", translate("Fragmentation Threshold"))
532         s:taboption("advanced", Value, "rts", translate("RTS/CTS Threshold"))
533 end
534
535
536 ------------------- WiFI-Encryption -------------------
537
538 encr = s:taboption("encryption", ListValue, "encryption", translate("Encryption"))
539 encr.override_values = true
540 encr.override_depends = true
541 encr:depends({mode="ap"})
542 encr:depends({mode="sta"})
543 encr:depends({mode="adhoc"})
544 encr:depends({mode="ahdemo"})
545 encr:depends({mode="ap-wds"})
546 encr:depends({mode="sta-wds"})
547 encr:depends({mode="mesh"})
548
549 encr:value("none", "No Encryption")
550 encr:value("wep-open",   translate("WEP Open System"), {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
551 encr:value("wep-shared", translate("WEP Shared Key"),  {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
552
553 if hwtype == "atheros" or hwtype == "mac80211" or hwtype == "prism2" then
554         local supplicant = fs.access("/usr/sbin/wpa_supplicant")
555         local hostapd = fs.access("/usr/sbin/hostapd")
556
557         if hostapd and supplicant then
558                 encr:value("psk", "WPA-PSK")
559                 encr:value("psk2", "WPA2-PSK")
560                 encr:value("psk-mixed", "WPA-PSK/WPA2-PSK Mixed Mode")
561                 encr:value("wpa", "WPA-EAP", {mode="ap"}, {mode="sta"}, {mode="ap-wds"}, {mode="sta-wds"})
562                 encr:value("wpa2", "WPA2-EAP", {mode="ap"}, {mode="sta"})
563         elseif hostapd and not supplicant then
564                 encr:value("psk", "WPA-PSK", {mode="ap"}, {mode="ap-wds"}, {mode="adhoc"}, {mode="ahdemo"})
565                 encr:value("psk2", "WPA2-PSK", {mode="ap"}, {mode="ap-wds"}, {mode="adhoc"}, {mode="ahdemo"})
566                 encr:value("psk-mixed", "WPA-PSK/WPA2-PSK Mixed Mode", {mode="ap"}, {mode="ap-wds"}, {mode="adhoc"}, {mode="ahdemo"})
567                 encr:value("wpa", "WPA-EAP", {mode="ap"}, {mode="ap-wds"})
568                 encr:value("wpa2", "WPA2-EAP", {mode="ap"}, {mode="ap-wds"})
569                 encr.description = translate(
570                         "WPA-Encryption requires wpa_supplicant (for client mode) or hostapd (for AP " ..
571                         "and ad-hoc mode) to be installed."
572                 )
573         elseif not hostapd and supplicant then
574                 encr:value("psk", "WPA-PSK", {mode="sta"}, {mode="sta-wds"})
575                 encr:value("psk2", "WPA2-PSK", {mode="sta"}, {mode="sta-wds"})
576                 encr:value("psk-mixed", "WPA-PSK/WPA2-PSK Mixed Mode", {mode="sta"}, {mode="sta-wds"})
577                 encr:value("wpa", "WPA-EAP", {mode="sta"}, {mode="sta-wds"})
578                 encr:value("wpa2", "WPA2-EAP", {mode="sta"}, {mode="sta-wds"})
579                 encr.description = translate(
580                         "WPA-Encryption requires wpa_supplicant (for client mode) or hostapd (for AP " ..
581                         "and ad-hoc mode) to be installed."
582                 )
583         else
584                 encr.description = translate(
585                         "WPA-Encryption requires wpa_supplicant (for client mode) or hostapd (for AP " ..
586                         "and ad-hoc mode) to be installed."
587                 )
588         end
589 elseif hwtype == "broadcom" then
590         encr:value("psk", "WPA-PSK")
591         encr:value("psk2", "WPA2-PSK")
592         encr:value("psk+psk2", "WPA-PSK/WPA2-PSK Mixed Mode")
593 end
594
595 encr:depends("mode", "ap")
596 encr:depends("mode", "sta")
597 encr:depends("mode", "ap-wds")
598 encr:depends("mode", "sta-wds")
599 encr:depends("mode", "wds")
600
601 server = s:taboption("encryption", Value, "server", translate("Radius-Server"))
602 server:depends({mode="ap", encryption="wpa"})
603 server:depends({mode="ap", encryption="wpa2"})
604 server:depends({mode="ap-wds", encryption="wpa"})
605 server:depends({mode="ap-wds", encryption="wpa2"})
606 server.rmempty = true
607
608 port = s:taboption("encryption", Value, "port", translate("Radius-Port"))
609 port:depends({mode="ap", encryption="wpa"})
610 port:depends({mode="ap", encryption="wpa2"})
611 port:depends({mode="ap-wds", encryption="wpa"})
612 port:depends({mode="ap-wds", encryption="wpa2"})
613 port.rmempty = true
614
615 wpakey = s:taboption("encryption", Value, "_wpa_key", translate("Key"))
616 wpakey:depends("encryption", "psk")
617 wpakey:depends("encryption", "psk2")
618 wpakey:depends("encryption", "psk+psk2")
619 wpakey:depends("encryption", "psk-mixed")
620 wpakey:depends({mode="ap", encryption="wpa"})
621 wpakey:depends({mode="ap", encryption="wpa2"})
622 wpakey:depends({mode="ap-wds", encryption="wpa"})
623 wpakey:depends({mode="ap-wds", encryption="wpa2"})
624 wpakey.datatype = "wpakey"
625 wpakey.rmempty = true
626 wpakey.password = true
627
628 wpakey.cfgvalue = function(self, section, value)
629         local key = m.uci:get("wireless", section, "key")
630         if key == "1" or key == "2" or key == "3" or key == "4" then
631                 return nil
632         end
633         return key
634 end
635
636 wpakey.write = function(self, section, value)
637         self.map.uci:set("wireless", section, "key", value)
638         self.map.uci:delete("wireless", section, "key1")
639 end
640
641
642 wepslot = s:taboption("encryption", ListValue, "_wep_key", translate("Used Key Slot"))
643 wepslot:depends("encryption", "wep-open")
644 wepslot:depends("encryption", "wep-shared")
645 wepslot:value("1", translatef("Key #%d", 1))
646 wepslot:value("2", translatef("Key #%d", 2))
647 wepslot:value("3", translatef("Key #%d", 3))
648 wepslot:value("4", translatef("Key #%d", 4))
649
650 wepslot.cfgvalue = function(self, section)
651         local slot = tonumber(m.uci:get("wireless", section, "key"))
652         if not slot or slot < 1 or slot > 4 then
653                 return 1
654         end
655         return slot
656 end
657
658 wepslot.write = function(self, section, value)
659         self.map.uci:set("wireless", section, "key", value)
660 end
661
662 local slot
663 for slot=1,4 do
664         wepkey = s:taboption("encryption", Value, "key" .. slot, translatef("Key #%d", slot))
665         wepkey:depends("encryption", "wep-open")
666         wepkey:depends("encryption", "wep-shared")
667         wepkey.datatype = "wepkey"
668         wepkey.rmempty = true
669         wepkey.password = true
670
671         function wepkey.write(self, section, value)
672                 if value and (#value == 5 or #value == 13) then
673                         value = "s:" .. value
674                 end
675                 return Value.write(self, section, value)
676         end
677 end
678
679
680 if hwtype == "atheros" or hwtype == "mac80211" or hwtype == "prism2" then
681         nasid = s:taboption("encryption", Value, "nasid", translate("NAS ID"))
682         nasid:depends({mode="ap", encryption="wpa"})
683         nasid:depends({mode="ap", encryption="wpa2"})
684         nasid:depends({mode="ap-wds", encryption="wpa"})
685         nasid:depends({mode="ap-wds", encryption="wpa2"})
686         nasid.rmempty = true
687
688         eaptype = s:taboption("encryption", ListValue, "eap_type", translate("EAP-Method"))
689         eaptype:value("tls",  "TLS")
690         eaptype:value("ttls", "TTLS")
691         eaptype:value("peap", "PEAP")
692         eaptype:depends({mode="sta", encryption="wpa"})
693         eaptype:depends({mode="sta", encryption="wpa2"})
694
695         cacert = s:taboption("encryption", FileUpload, "ca_cert", translate("Path to CA-Certificate"))
696         cacert:depends({mode="sta", encryption="wpa"})
697         cacert:depends({mode="sta", encryption="wpa2"})
698
699         privkey = s:taboption("encryption", FileUpload, "priv_key", translate("Path to Private Key"))
700         privkey:depends({mode="sta", eap_type="tls", encryption="wpa2"})
701         privkey:depends({mode="sta", eap_type="tls", encryption="wpa"})
702
703         privkeypwd = s:taboption("encryption", Value, "priv_key_pwd", translate("Password of Private Key"))
704         privkeypwd:depends({mode="sta", eap_type="tls", encryption="wpa2"})
705         privkeypwd:depends({mode="sta", eap_type="tls", encryption="wpa"})
706
707
708         auth = s:taboption("encryption", Value, "auth", translate("Authentication"))
709         auth:value("PAP")
710         auth:value("CHAP")
711         auth:value("MSCHAP")
712         auth:value("MSCHAPV2")
713         auth:depends({mode="sta", eap_type="peap", encryption="wpa2"})
714         auth:depends({mode="sta", eap_type="peap", encryption="wpa"})
715         auth:depends({mode="sta", eap_type="ttls", encryption="wpa2"})
716         auth:depends({mode="sta", eap_type="ttls", encryption="wpa"})
717
718
719         identity = s:taboption("encryption", Value, "identity", translate("Identity"))
720         identity:depends({mode="sta", eap_type="peap", encryption="wpa2"})
721         identity:depends({mode="sta", eap_type="peap", encryption="wpa"})
722         identity:depends({mode="sta", eap_type="ttls", encryption="wpa2"})
723         identity:depends({mode="sta", eap_type="ttls", encryption="wpa"})
724
725         password = s:taboption("encryption", Value, "password", translate("Password"))
726         password:depends({mode="sta", eap_type="peap", encryption="wpa2"})
727         password:depends({mode="sta", eap_type="peap", encryption="wpa"})
728         password:depends({mode="sta", eap_type="ttls", encryption="wpa2"})
729         password:depends({mode="sta", eap_type="ttls", encryption="wpa"})
730 end
731
732 return m